fix(core,cli): upgrade socket.io-client to 4.8.4 to pick up patched ws

Upgrade `socket.io-client` to 4.8.4 in `@trigger.dev/core` and the CLI.
Projects using the SDK now install `ws` 8.21 instead of 8.17.1, which
has published advisories and couldn't be upgraded without a package
manager override.

Mono-RevId: 414e251359d5a04868ea28cfe9dc8a4904717734

Author: ericallam

.changeset/socket-io-client-ws.md

@@ -0,0 +1,6 @@
+---
+"@trigger.dev/core": patch
+"trigger.dev": patch
+---
+
+Upgrade `socket.io-client` to 4.8.4 so projects using the SDK and CLI install `ws` 8.21 instead of 8.17.1, which has published advisories (GHSA-96hv-2xvq-fx4p, GHSA-58qx-3vcg-4xpx). The old pin blocked upgrading `ws` without a package manager override.

apps/supervisor/package.json

@@ -29,6 +29,6 @@
   "devDependencies": {
     "@internal/testcontainers": "workspace:*",
     "@types/dockerode": "^3.3.33",
-    "socket.io-client": "4.7.5"
+    "socket.io-client": "4.8.4"
   }
 }

apps/webapp/package.json

@@ -259,7 +259,7 @@
     "evalite": "1.0.0-beta.16",
     "jsdom": "^30.0.1",
     "react-router-dom": "6.30.4",
-    "socket.io-client": "4.7.5",
+    "socket.io-client": "4.8.4",
     "supertest": "^7.0.0",
     "tailwind-scrollbar": "^4.0.2",
     "tsx": "^4.20.6",

packages/cli-v3/package.json

@@ -120,7 +120,7 @@
     "resolve": "^1.22.8",
     "semver": "^7.5.0",
     "signal-exit": "^4.1.0",
-    "socket.io-client": "4.7.5",
+    "socket.io-client": "4.8.4",
     "source-map-support": "0.5.21",
     "std-env": "^3.7.0",
     "strip-ansi": "^7.1.0",

packages/core/package.json

@@ -225,7 +225,7 @@
     "jose": "^5.4.0",
     "nanoid": "3.3.18",
     "prom-client": "^15.1.0",
-    "socket.io-client": "4.7.5",
+    "socket.io-client": "4.8.4",
     "std-env": "^3.8.1",
     "tinyexec": "^0.3.2",
     "uncrypto": "^0.1.3",